Pattern Matching Performance with HyperScan* Software: Brief

Pattern Matching Performance with HyperScan* Software: Brief

The multi-threaded architecture of Sensory Networks HyperScan* software enables multiple instances of the pattern-matching executable, perhaps utilizing different signature sets, to run simultaneously. It should be used on a multi-core hardware platform in order to maximize performance.

But how many cores are needed? What are the minimum platform requirements that will enable equipment designers to forego dedicated hardware acceleration? What kind of extra, performance-enhancing features are needed to optimize pattern matching and deliver better overall data security?

In an effort to answer these questions and identify the ideal platform for their software, Sensory Networks prepared a series of benchmark tests using different hardware platforms. They selected multi-core Intel® architecture platforms for all of the tests because it was available in multiple variants for number of cores available, performance levels, and feature sets. That coupled with micro-architectural level innovations, rich instruction set architecture, and a fully developed software toolkit enabled Sensory Networks to perform the necessary tests evenly across multiple systems.

While the HyperScan software performed well on Intel’s original quad-core platform, it scaled significantly when run on the new Intel® Xeon® processor 5500 series (formerly code-named “Nehalem”). In fact, the tests showed the new platform performing 22 percent faster (clock-for-clock) than the previous generation quad-core processor, and an 18 percent aggregate improvement in throughput performance.

This solution study explains the benchmark tests and describes how Sensory Networks HyperScan software running on a platform with the Intel Xeon processor 5500 series can deliver the necessary performance to maintain line rates when running security applications.

The multi-threaded architecture of Sensory Networks HyperScan* software enables multiple instances of the pattern-matching executable, perhaps utilizing different signature sets, to run simultaneously. It should be used on a multi-core hardware platform in order to maximize performance.

But how many cores are needed? What are the minimum platform requirements that will enable equipment designers to forego dedicated hardware acceleration? What kind of extra, performance-enhancing features are needed to optimize pattern matching and deliver better overall data security?

In an effort to answer these questions and identify the ideal platform for their software, Sensory Networks prepared a series of benchmark tests using different hardware platforms. They selected multi-core Intel® architecture platforms for all of the tests because it was available in multiple variants for number of cores available, performance levels, and feature sets. That coupled with micro-architectural level innovations, rich instruction set architecture, and a fully developed software toolkit enabled Sensory Networks to perform the necessary tests evenly across multiple systems.

While the HyperScan software performed well on Intel’s original quad-core platform, it scaled significantly when run on the new Intel® Xeon® processor 5500 series (formerly code-named “Nehalem”). In fact, the tests showed the new platform performing 22 percent faster (clock-for-clock) than the previous generation quad-core processor, and an 18 percent aggregate improvement in throughput performance.

This solution study explains the benchmark tests and describes how Sensory Networks HyperScan software running on a platform with the Intel Xeon processor 5500 series can deliver the necessary performance to maintain line rates when running security applications.